1. Introduction

Welcome to ora789's Privacy Policy. At ora789, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect the personal data you provide when you access or use our website at https://ora789.cam, our mobile applications, and related services (collectively, the "Services").

By using ora789's Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any part of this Privacy Policy, you must discontinue use of our Services immediately.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which are incorporated herein by reference. ora789 operates in accordance with applicable data protection laws and regulations, including standards for personal data protection in Indonesia and international best practices.

Our Privacy Commitment

ora789 employs industry-standard security measures including SSL encryption, secure server infrastructure, and strict access controls to protect your personal information. We will never sell your personal data to third parties for marketing purposes without your explicit consent.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an Account with ora789, we collect the following personal information:

  • Identity Information: Full legal name, date of birth, gender, and nationality as stated on your Indonesian identity card (KTP) or other government-issued identification documents.
  • Contact Information: Email address, phone number (including WhatsApp contact details), and residential address.
  • Account Credentials: Username, password, and security questions/answers for Account authentication.
  • Financial Information: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, or other Indonesian banks), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records, and payment card details if applicable.
  • Verification Documents: Copies of your Indonesian KTP (identity card), passport (if provided), utility bills, bank statements, selfie photographs for facial recognition verification, and other documents required for Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance.
  • Communication Data: Records of your communications with our customer support team via live chat, email, WhatsApp, or phone, including transcripts, attachments, and support tickets.

2.2 Information Collected Automatically

When you use our Services, we automatically collect certain technical and usage information:

  • Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID), and mobile network information.
  • Usage Data: Pages visited, games played, bets placed, search queries, clickstream data, session duration, frequency of visits, and interaction patterns within the platform.
  • Location Data: IP address, geolocation data (country, region, city), and time zone information to verify your location and ensure compliance with regional restrictions.
  • Transaction Data: Details of all financial transactions, including deposit amounts, withdrawal requests, bonus credits, wagering activity, game outcomes, and bet history.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

  • Payment Processors: Transaction confirmations, payment status updates, and fraud prevention data from banks and e-wallet providers.
  • Identity Verification Services: Age verification, identity authentication, and fraud detection data from specialized KYC service providers.
  • Marketing Partners: Referral information, affiliate tracking data, and promotional campaign performance metrics (only with your consent).

3. How We Use Your Data

3.1 Primary Uses

ora789 uses your personal information for the following purposes:

  • Account Management: Creating, maintaining, and managing your gaming Account, including authentication, password resets, and Account security monitoring.
  • Service Provision: Providing access to our sports betting, live casino, slots, and other gaming services; processing bets and game transactions; calculating winnings and distributing payouts.
  • Financial Transactions: Processing deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay); maintaining transaction records; preventing fraud and money laundering.
  • KYC and Compliance: Verifying your identity, age (21+ requirement), and eligibility; complying with legal and regulatory obligations including anti-money laundering (AML) and counter-terrorism financing (CTF) regulations; preventing underage gambling and fraud.
  • Customer Support: Responding to your inquiries, resolving technical issues, investigating complaints, and providing assistance via live chat, email, or WhatsApp.
  • Marketing and Promotions: Sending you information about bonuses, promotions, tournaments, and new game releases (only with your consent); personalizing promotional offers based on your gaming preferences.
  • Platform Improvement: Analyzing usage patterns to improve our Services, develop new features, optimize user experience, and enhance platform performance.
  • Responsible Gaming: Monitoring gaming behavior to identify potential problem gambling patterns; implementing deposit limits, self-exclusion periods, and other responsible gaming tools; providing support to users who may need assistance.

3.2 Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contractual Necessity: Processing is necessary to perform our contract with you (Terms & Conditions) and provide the Services you requested.
  • Legal Obligation: Processing is required to comply with legal and regulatory obligations, including KYC, AML, CTF, and responsible gaming requirements.
  • Legitimate Interest: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, service improvement, and customer support.
  • Consent: For marketing communications and non-essential data processing, we obtain your explicit consent, which you may withdraw at any time.

4. Data Sharing and Disclosure

4.1 When We Share Your Information

ora789 does not sell your personal data to third parties. However, we may share your information in the following circumstances:

  • Service Providers: We share data with trusted third-party service providers who assist us in operating our platform, including payment processors (banks and e-wallet providers), identity verification services, cloud hosting providers, customer support software vendors, and analytics platforms. These providers are contractually obligated to protect your data and use it only for specified purposes.
  • Game Providers: When you play games from Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, or other providers, certain gameplay data (bets placed, outcomes, winnings) is shared with those providers to facilitate game operation and settlement.
  • Legal and Regulatory Authorities: We may disclose your information to law enforcement agencies, regulatory bodies, courts, or government authorities when required by law, legal process, or to comply with regulatory obligations (e.g., AML/CTF reporting).
  • Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.
  • Protection of Rights: We may disclose information when necessary to protect the rights, property, or safety of ora789, our users, or the public, including fraud investigation, breach of Terms & Conditions, or other security incidents.

4.2 Marketing Communications

We will only send you promotional emails, SMS messages, or push notifications if you have opted in to receive marketing communications. You can opt out at any time by clicking the unsubscribe link in our emails, adjusting your Account notification settings, or contacting customer support.

5. Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. ora789 uses cookies and similar tracking technologies (web beacons, pixels, local storage) to enhance your browsing experience, remember your preferences, analyze platform usage, and deliver personalized content.

5.2 Types of Cookies We Use

  • Essential Cookies: Required for basic platform functionality, including Account authentication, session management, security features, and transaction processing. These cookies cannot be disabled.
  • Performance Cookies: Collect anonymous data about how users interact with our platform, helping us identify and fix technical issues, optimize loading times, and improve overall performance.
  • Functionality Cookies: Remember your preferences (language, currency, display settings) and provide enhanced features like personalized game recommendations and saved favorites.
  • Advertising Cookies: Track your browsing behavior across websites to deliver targeted advertisements and measure campaign effectiveness. These cookies require your consent and can be disabled in your browser settings.

5.3 Managing Cookies

You can control cookie settings through your web browser preferences. Most browsers allow you to block or delete cookies, though this may affect platform functionality. Disabling essential cookies may prevent you from using certain features of our Services.

6. Data Security Measures

6.1 Technical Safeguards

ora789 implements industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

  • Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols (256-bit encryption). Sensitive data stored on our servers is encrypted at rest.
  • Access Controls: Strict role-based access controls limit employee and contractor access to personal data on a need-to-know basis. Multi-factor authentication is required for administrative access.
  • Network Security: Firewalls, intrusion detection systems, and regular security audits protect our infrastructure from cyber threats.
  • Data Segregation: Financial data, identity documents, and gameplay records are stored in separate secure environments with additional protection layers.
  • Regular Testing: We conduct regular penetration testing, vulnerability assessments, and security audits to identify and address potential weaknesses.

6.2 Physical and Administrative Safeguards

Our data centers employ physical security measures including 24/7 surveillance, biometric access controls, and environmental monitoring. All employees and contractors with access to personal data undergo background checks and receive privacy and security training. We maintain incident response procedures to address data breaches or security incidents promptly.

6.3 Your Responsibility

While we implement strong security measures, you also play a crucial role in protecting your Account. Never share your password with anyone, enable two-factor authentication, use a strong unique password, log out after each session on shared devices, and immediately report any suspected unauthorized access to our support team.

7. Data Retention

ora789 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.

  • Active Accounts: Personal and transactional data is retained for the duration of your Account's active status plus any applicable legal retention periods.
  • Closed Accounts: After Account closure, we retain identity verification documents, transaction records, and compliance data for a minimum of 5 years (or longer if required by law) to meet AML/CTF and tax obligations.
  • Marketing Data: If you opt out of marketing communications, we will retain a record of your opt-out preference to ensure we do not contact you again, but we will delete other marketing-related data within 60 days.
  • Gameplay Records: Bet history, game outcomes, and related data may be retained for up to 7 years for audit, dispute resolution, and regulatory compliance purposes.

Once the retention period expires and data is no longer needed, we securely delete or anonymize your personal information in accordance with our data deletion procedures.

8. Your Privacy Rights

8.1 Access and Portability

You have the right to request access to the personal information we hold about you. We will provide a copy of your data in a structured, commonly used, and machine-readable format upon request. You may also request data portability—transferring your data to another service provider where technically feasible.

8.2 Correction and Update

You can update your Account information (email, phone, address) at any time by logging into your Account settings. For changes to identity documents or other verified information, please contact our customer support team with supporting documentation.

8.3 Deletion and Erasure

You have the right to request deletion of your personal data, subject to certain exceptions. We may be required to retain some information to comply with legal obligations (e.g., AML/CTF records, tax documentation, dispute resolution evidence) even after you request deletion. To request deletion, contact our privacy team through the details provided in the Contact Us section.

8.4 Objection and Restriction

You may object to certain processing activities, such as marketing communications or profiling for personalized advertising. You can also request restriction of processing in specific circumstances, such as during a dispute about data accuracy or while we investigate a deletion request.

8.5 Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

8.6 Exercising Your Rights

To exercise any of these rights, please contact our privacy team at the email address provided in the Contact Us section. We will respond to your request within 30 days and may require identity verification to protect against unauthorized access to your data.

9. Children's Privacy

ora789's Services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from anyone under the age of 21. Our registration process includes age verification checks, and we require submission of government-issued identification (Indonesian KTP) to confirm eligibility.

If we discover that we have inadvertently collected personal information from an individual under 21 years of age, we will delete that information immediately and close the associated Account. If you believe we have collected information from a minor, please contact our privacy team immediately.

Parents and guardians should monitor their children's internet usage and ensure that minors do not access gambling websites. We recommend using parental control software and educating young people about the risks of underage gambling.

10. International Data Transfers

ora789 operates primarily for the Indonesian market, but our infrastructure may involve servers and service providers located outside Indonesia. When we transfer your personal data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

These safeguards may include standard contractual clauses approved by regulatory authorities, adequacy decisions recognizing equivalent data protection standards in the destination country, or other legally recognized transfer mechanisms. If you have questions about international transfers of your data, please contact our privacy team.

11. Changes to This Privacy Policy

ora789 reserves the right to update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. The "Last Updated" date at the top of this page indicates when the Policy was last revised.

Material changes will be communicated via email to the address associated with your Account or through a prominent notice on our website at least 30 days before the changes take effect. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

Your continued use of ora789's Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must discontinue use of our Services and may request Account closure.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our privacy team:

  • Email: [email protected] (displayed as plain text, not a clickable link per site policy)
  • Subject Line: "Privacy Inquiry" or "Data Protection Request"
  • Live Chat: Available 24/7 via our website for immediate assistance
  • WhatsApp: Contact us through our official support channels

We aim to respond to all privacy inquiries within 30 days. For urgent matters related to data security or unauthorized access, please contact us immediately via live chat for the fastest response.

Your Trust Matters

At ora789, protecting your privacy is not just a legal obligation—it's a core value. We are committed to transparency, security, and giving you control over your personal information. Thank you for trusting us with your data.

Our Privacy Principles

The core values that guide our data protection practices

Transparency

We are open and honest about what data we collect, why we collect it, and how we use it. This Privacy Policy provides clear, accessible information about our practices—no hidden terms or deceptive language.

Security

We protect your data with bank-grade SSL encryption, secure server infrastructure, strict access controls, and regular security audits. Your personal and financial information is safeguarded against unauthorized access, theft, and misuse.

Control

You have the right to access, correct, delete, or restrict processing of your personal data. You can opt out of marketing communications, set privacy preferences, and request data portability at any time—your data, your choice.

Compliance

We comply with international data protection standards, Indonesian privacy regulations, and industry best practices. Our KYC and AML processes meet regulatory requirements while respecting your privacy rights.

No Selling

We will never sell your personal data to third parties for marketing purposes. Your information is used only to provide Services, comply with legal obligations, and improve your experience—nothing more.

Accountability

We take responsibility for protecting your data and responding to your privacy requests promptly. If something goes wrong, we will notify you, take corrective action, and learn from the incident to prevent recurrence.

Questions About Your Privacy?

Our privacy team is here to answer your questions, address your concerns, and help you exercise your data protection rights. We're available 24/7.

Read FAQ View Terms Back to Home